The Twisted framework vulnerability tracked as CVE-2024-41810 — an HTML injection in the HTTP redirect body — is real, patched upstream, and straightforward to describe: the function that generates redirect responses reflects the destination URL into an HTML body without proper encoding, which...